Traffic Trace Info
DumpFile: 201103101400.dump
FileSize: 2941.23MB
Id: 201103101400
StartTime: Thu Mar 10 14:00:00 2011
EndTime: Thu Mar 10 14:15:00 2011
TotalTime: 899.82 seconds
TotalCapSize: -1790.60MB CapLen: 96 bytes
# of packets: 41669162 (31589.24MB)
AvgRate: 294.49Mbps stddev:43.02M
IP flow (unique src/dst pair) Information
# of flows: 906435 (avg. 45.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.9% 3.7% 1.6% 1.5% 1.4% 1.3% 1.2% 1.0% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 482984
Top 10 bandwidth usage (bytes/total in %):
17.3% 17.3% 5.8% 5.1% 4.0% 3.7% 3.7% 3.4% 3.4% 2.9%
# of IPv6 addresses: 5266
Top 10 bandwidth usage (bytes/total in %):
51.7% 47.8% 26.8% 26.8% 7.7% 7.7% 2.4% 1.6% 1.6% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103101400.pktlen.png)
detailed numbers
[ 32- 63]: 8300987
[ 64- 127]: 8456290
[ 128- 255]: 1931428
[ 256- 511]: 1293894
[ 512- 1023]: 980943
[ 1024- 2047]: 20705620
Protocol Breakdown
![[protocol breakdown chart]](201103101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41669162 (100.00%) 33123719260 (100.00%) 794.92
ip 41371758 ( 99.29%) 32910593699 ( 99.36%) 795.48
tcp 33921350 ( 81.41%) 29066913743 ( 87.75%) 856.89
http(s) 13875752 ( 33.30%) 17207951065 ( 51.95%) 1240.15
http(c) 12578995 ( 30.19%) 7147632709 ( 21.58%) 568.22
squid 261888 ( 0.63%) 93402738 ( 0.28%) 356.65
smtp 175798 ( 0.42%) 72585316 ( 0.22%) 412.89
ftp 43136 ( 0.10%) 4058763 ( 0.01%) 94.09
pop3 21701 ( 0.05%) 7263070 ( 0.02%) 334.69
imap 6707 ( 0.02%) 2979631 ( 0.01%) 444.26
telnet 32997 ( 0.08%) 2456769 ( 0.01%) 74.45
ssh 1668112 ( 4.00%) 2095014127 ( 6.32%) 1255.92
dns 11154 ( 0.03%) 1057060 ( 0.00%) 94.77
bgp 570 ( 0.00%) 93173 ( 0.00%) 163.46
napster 30 ( 0.00%) 4232 ( 0.00%) 141.07
realaud 175 ( 0.00%) 13347 ( 0.00%) 76.27
rtsp 8952 ( 0.02%) 7894353 ( 0.02%) 881.85
icecast 657 ( 0.00%) 65781 ( 0.00%) 100.12
hotline 41 ( 0.00%) 2999 ( 0.00%) 73.15
other 5234685 ( 12.56%) 2424438610 ( 7.32%) 463.15
udp 5995444 ( 14.39%) 3156595745 ( 9.53%) 526.50
dns 852137 ( 2.05%) 179600169 ( 0.54%) 210.76
rip 1 ( 0.00%) 72 ( 0.00%) 72.00
realaud 46 ( 0.00%) 6139 ( 0.00%) 133.46
halflif 62 ( 0.00%) 6301 ( 0.00%) 101.63
starcra 65 ( 0.00%) 9293 ( 0.00%) 142.97
everque 434 ( 0.00%) 105863 ( 0.00%) 243.92
unreal 55 ( 0.00%) 9947 ( 0.00%) 180.85
quake 25 ( 0.00%) 2451 ( 0.00%) 98.04
cuseeme 5 ( 0.00%) 500 ( 0.00%) 100.00
other 5142545 ( 12.34%) 2976815433 ( 8.99%) 578.86
icmp 367101 ( 0.88%) 71411537 ( 0.22%) 194.53
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 10258 ( 0.02%) 6051024 ( 0.02%) 589.88
ip6 1059980 ( 2.54%) 605760899 ( 1.83%) 571.48
other 17441 ( 0.04%) 3841591 ( 0.01%) 220.26
frag 409 ( 0.00%) 455037 ( 0.00%) 1112.56
ip6 297404 ( 0.71%) 213125561 ( 0.64%) 716.62
tcp6 236557 ( 0.57%) 195839757 ( 0.59%) 827.88
http(s) 160527 ( 0.39%) 118576725 ( 0.36%) 738.67
http(c) 3166 ( 0.01%) 390903 ( 0.00%) 123.47
squid 6 ( 0.00%) 508 ( 0.00%) 84.67
smtp 217 ( 0.00%) 62855 ( 0.00%) 289.65
ftp 43 ( 0.00%) 3814 ( 0.00%) 88.70
ssh 30 ( 0.00%) 2580 ( 0.00%) 86.00
dns 1869 ( 0.00%) 468575 ( 0.00%) 250.71
bgp 93 ( 0.00%) 17955 ( 0.00%) 193.06
other 70606 ( 0.17%) 76315842 ( 0.23%) 1080.87
udp6 42037 ( 0.10%) 15166262 ( 0.05%) 360.78
dns 38581 ( 0.09%) 14361490 ( 0.04%) 372.24
other 3456 ( 0.01%) 804772 ( 0.00%) 232.86
icmp6 18472 ( 0.04%) 1879454 ( 0.01%) 101.75
ip6 80 ( 0.00%) 10940 ( 0.00%) 136.75
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 227 ( 0.00%) 224932 ( 0.00%) 990.89
tcpdump file: 201103101400.dump.gz (967.75 MB)